Skip to main content
Question

Encrypting user password in linux ODBC DSN and JDBC url

  • September 13, 2019
  • 2 replies
  • 14 views

chaima
Forum|alt.badge.img+2
  • Participating Frequently

Hello,
I have a customer who wants to know whether or not there is a way to use an encrypted user password instead of plain text in odbc.ini or jdbc url on linux platform .
From the documentation it looks like it's possible for windows odbc clients but nothing about linux or jdbc..
Any idea?
Thanks
Chaima

2 replies

skeswani
Forum|alt.badge.img
  • Participating Frequently
  • September 13, 2019

The reason its not done, is that is just moves the problem elsewhere, and add complexity with no real benefit.
i.e. Where are they planning to store the password/key that they will use encrypt the password?
The right way is to change the permissions on the odbc.ini file to "r--" and just protect the user account with whatever password policy and rotation requirements they have.


chaima
Forum|alt.badge.img+2
  • Author
  • Participating Frequently
  • September 16, 2019

Thank you @skeswani , they were also wondering if we provide a way to encrypt the password too. I guess the answer is no too, right?